Janubiy Koreya politsiyasi mamlakatdagi 90 dan ortiq tashkilotni buzib kirgan kiberjinoyat operatsiyasi bilan bog'liq yetti gumondorni aniqladi; hujumlarning aksariyatida ARTEX AI pentesting tizimi ishlatilgan.
Mahalliy ommaviy axborot vositalari Seul shahar politsiyasiga tayanib xabar berishicha, to'da rahbari pentesting (kirish sinovi) sohasida tajribaga ega bo'lib, 2019-yildan 2022-yilgacha kiberxavfsizlik kompaniyasida ishlagan.
38 ta hodisada tahdid qiluvchi 360 million von (270 000 dollar) miqdorida to'lov talab qilgan va evaziga o'g'irlangan ma'lumotlarni tarqatmaslikni va'da qilgan.
Hokimiyatlar tahdid qiluvchi buzilgan tashkilotlardan 8,2 million yozuvni o'g'irlagan deb hisoblaydi; ular orasida ta'lim muassasalari, shifoxonalar, yirik korporatsiyalar va hatto golf maydonlari ham bor.
Jabrlanuvchiga yuborilgan tahdid xabari Manba: Yonhap
Yonhap News xabar berishicha, to'da rahbari o'z-o'zini o'rgatgan 32 yoshli xaker bo'lib, 2025-yil sentyabr oyida tashkilotlarga hujum qilishni boshlagan.
Seul shahar politsiyasi nashrga ma'lum qilishicha, xaker ARTEX AI kirish sinovi to'plamini ishlatgan — bu xuddi Xitoy tilida so'zlashuvchi tahdid qiluvchiga tegishli deb hisoblangan Janubiy Koreya banklariga qilingan hujumlarda ishlatilgan avtonom tizimdir.
Dastlab xaker an'anaviy vositalardan foydalangan, ammo 2026-yil avgust oyining oxirida hujumlarni kengaytirish uchun AI vositalarini qabul qilgan.
Politsiya yetti gumondorning barchasini hibsga olgan, ammo faqat guruh rahbari qamoqda qolgan. 15-oktabrda hibsga olingan u ikki kun o'tib rasmiy ravishda qamoqqa olingan va 23-oktabrda prokurorlarga yuborilgan. Qolgan olti gumondor hibsga olinmasdan tergov ostida qolmoqda.
Politsiya iyun oyida jabrlanuvchi shikoyat qilganidan so'ng ish ochgan va tergovchilar buzilgan tashkilotlardan olingan server jurnallari orqali gumondorlarni aniqlagan.
Huquqni muhofaza qiluvchi organlar qayta tiklangan dalillarni tahlil qilish uchun ichki AI vositasidan foydalangani aytilmoqda.
Politsiya mahalliy ommaviy axborot vositalariga AI intiluvchan kiberjinoyatchilar uchun kirish to'sig'ini pasaytirganini, natijada avval faqat malakali, bilimli shaxslar amalga oshira olgan keng ko'lamli, yuqori ta'sirli hodisalar yuzaga kelganini aytdi.
"Bu Koreyada generativ AI dan foydalanib keng ko'lamli xakerlik va shaxsiy ma'lumot o'g'irlash jinoyati bilan bog'liq gumondorning hibsga olinishi bilan bog'liq birinchi holat", — deb politsiya Yonhapga ma'lum qildi.
"Endi professional xaker tashkilotlari bo'lmagan shaxslar ham AI yordamida keng ko'lamda xakerlik qila oladi."
Politsiya tergovni davom ettirmoqda va hozirda o'g'irlangan ma'lumotlarning qorong'u tarmoqda tarqatilgan yoki tarqatilmaganligini aniqlashga e'tibor qaratmoqda.
Hujumchilar haqiqiy hisob ma'lumotlariga ega bo'lgach, ularning harakatlarining faqat 37 foizi to'xtatiladi
Umumiy oldini olish ko'rsatkichlari dastlabki kirishdan keyin nima sodir bo'lishini yashirishi mumkin. Hujumchilar haqiqiy hisob ma'lumotlaridan foydalanganda, oldini olish keskin pasayadi.
Blue Report 2026 mijozlarning ishlab chiqarish muhitlarida o'tkazilgan 338 million simulyatsiya bo'yicha mudofaa texnikalarini birma-bir o'lchaydi.
Hisobotni oling
South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks.
According to local media citing the Seoul Metropolitan Police, the gang leader has a background in penetration testing and worked at a cybersecurity company between 2019 and 2022.
In 38 of the incidents, the threat actor demanded ransom payments of 360 million won ($270,000), promising in exchange not to leak stolen data.
Authorities believe the threat actor stole 8.2 million records from compromised organizations, including educational institutes, hospitals, large corporations, and even golf courses.
Extortion message sent to a victim Source: Yonhap
Yonhap News says that the gang leader is a self-taught 32 year-old hacker and started attacking organizations in September 2025.
The Seoul Metropolitan police told the publication that the hacker used the ARTEX AI penetration testing suite, the same autonomous framework used in the attacks against multiple South Korean banks attributed to a Chinese-speaking threat actor.
Initially, the hacker used conventional tools but adopted AI utilities in late August 2026 to expand the attacks.
Authorities arrested all seven suspects, but only the group’s leader remains in custody. Arrested on October 15, he was formally detained two days later and referred to prosecutors on October 23. The other six suspects remain under investigation without being detained.
Police opened a case after a victim filed a complaint in June, and investigators traced the suspects through server logs from the breached entities.
Law enforcement authorities reportedly used an in-house AI tool to analyze the recovered evidence.
The police told local media that AI has lowered the barrier to entry for aspiring cybercriminals, resulting in large-scale, high-impact incidents that were previously only possible for skillful, knowledgeable actors.
“This is the first case of arrest of a suspect in Korea related to a large-scale hacking and personal information theft crime that exploited generative AI," the police told Yonhap.
“Even individuals who are not professional hacker organizations can now hack on a large scale with the help of AI.”
The police continue the investigation, now focusing on whether any of the stolen data has been leaked on the dark web.
Once attackers have valid credentials, only 37% of their actions are blocked
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Get the report